4,228 reputation
731
bio website
location Netherlands
age 40
visits member for 2 years, 9 months
seen 10 hours ago

Java and security expert with over 10 years of experience with the language and with the practical application of cryptographic protocols - including the design of protocols within international standardization bodies. Creator of a heavily used common criteria certified product. Over 30 years of experience with computers. Likes kids, cats, reading, movies and several sports.


Jul
28
answered Is it secure to use Diffie-Hellman key agreement to generate a nonce?
Jul
28
comment OTT service using FPE
@e-sushi I guess that if the size of the stream does not have to be maintained that there would be room for such a thing. Obviously it would not be easy to create, and anybody listening in would likely either hear a lot of noise or - if stenography is also used - a receive a very large stream.
Jul
28
comment Implementing CD serial key system
@RickyDemer It seems that the threshold was more about splitting the signature in multiple parts. I don't think that counts as threshold-crypto, so I removed the tag.
Jul
28
revised Implementing CD serial key system
paragraphs; edited tags
Jul
28
accepted CSPRNG that cannot be used as random extractor
Jul
28
comment CSPRNG that cannot be used as random extractor
Your answer has a lot more information than the one of Otus, and as learning is concerned it is of more value. However, I think otus came closer with regards to providing an answer. +1 none-the-less of course.
Jul
28
accepted Whitening and randomness extraction
Jul
28
comment Whitening and randomness extraction
I guess without format definition of "whitening" this is the best it can get...
Jul
28
comment Whitening and randomness extraction
@D.W. That's probably part of my problem. Up to now I had in mind that whitening is something that is a relatively simple method such as performing a XOR on the output of one or two RNG's, but I sometimes see it use as a more general method of (at least) creating a good distribution of values given by an RNG.
Jul
27
reviewed Reviewed Adding points on Elliptic Curves
Jul
27
revised Adding points on Elliptic Curves
formatting
Jul
27
reviewed Reviewed Elliptic Curve Cryptography
Jul
27
comment Elliptic Curve Cryptography
Welcome to crypto! Note: you can use $ signs inline as well to format your formulas etc.
Jul
27
revised Elliptic Curve Cryptography
added 22 characters in body
Jul
27
answered Key Derivation from random salted seed, HMAC and HMAC based KDF
Jul
27
comment CSPRNG that cannot be used as random extractor
@PaŭloEbermann that's the thought that crept up to me as well when I was typing up the question and reading through the NIST specs. Still, I think it is interesting to see what happens if you indiscriminately supply entropy to a CSPRNG. Will there be some CSPRNG's that cannot handle that situation? Or is the security definition of a CSPRNG defined in such a way that it must operate correctly given enough entropy?
Jul
27
answered Compression function to guarantee randomness of one time pads?
Jul
27
awarded  Custodian
Jul
27
reviewed Reviewed Understanding Lattice based cryptosystem
Jul
27
revised True Random Number Generator by milliseconds per keystroke (TRNG-Kms)
distinction for full entropy source , after some additional research